Microsoft ultimately issued its first security patch of 2021, which addresses more than 82 flaws present in about 12 services and also includes an active exploit zero-day vulnerability.

In this latest patch, 10 bugs are taken as critical and more than 72 bugs are listed as important for services. This updates security patch covers the flaws of Microsoft Windows, ChakraCore, Microsoft Office Services, Web Apps, Visual Studio, NET Core, ASP. NET, Visual Studio, and many others.

The most critical issue founded is Microsoft Defender is RCE (remote code execution) that permits the hackers to infect the targeted systems with an arbitrary code.

Whereas Microsoft Malware Protection Engine (mpengine.dll) provides the scanning, cleaning, and detection capabilities for Microsoft Defender antispyware software program. The version affected by this flaw is 1.1.17600.5 and this bug is addressed in version 1.1.17700.4.

The addressed bug is activated and wild in nature, it is work as the zero-click flaw that can be exploited into the system with any interaction with the user, it details are scary on how it gets spread and exploited.

Microsoft experts say that the technique is not fully functional in all types of situations and the exploit is still considered to be a proof-of-concept, along with various updates requires for working.

Vulnerability Fixed By Security Update 2021!

According to the senior director of product management and security said that; the organizations that are configured with automatic updates, don’t need to take any action, as the threat actor will try to evade the protection of the system and will block the engine updates automatically.

Many experts said that the flaw is already resolved by the automatic updates by Malware Protection Engine which released over a month or when it required a patch to fix a new vulnerability discovered.

Microsoft also fixed both publicly disclosed vulnerability and zero-day in this security update. They also released the patch of zero-day RCE vulnerability with CVE-2021-1647.

Microsoft also patched the vulnerability disclosed publicly by Google under CVE-2020-0986. Look out for this table below to know about the patched in detail.

Tag	CVE ID	CVE Title	Severity
.NET Repository	CVE-2021-1725	Bot Framework SDK Information Disclosure Vulnerability	Important

ASP.NET core & .NET core	CVE-2021-1723	ASP.NET Core and Visual Studio Denial of Service Vulnerability	Important
Azure Active Directory Pod Identity	CVE-2021-1677	Azure Active Directory Pod Identity Spoofing Vulnerability	Important
Microsoft Bluetooth Driver	CVE-2021-1683	Windows Bluetooth Security Feature Bypass Vulnerability	Important
Microsoft Bluetooth Driver	CVE-2021-1638	Windows Bluetooth Security Feature Bypass Vulnerability	Important
Microsoft Bluetooth Driver	CVE-2021-1684	Windows Bluetooth Security Feature Bypass Vulnerability	Important
Microsoft DTV-DVD Video Decoder	CVE-2021-1668	Microsoft DTV-DVD Video Decoder Remote Code Execution Vulnerability	Critical
Microsoft Edge (HTML-based)	CVE-2021-1705	Microsoft Edge (HTML-based) Memory Corruption Vulnerability	Critical
Microsoft Graphics Component	CVE-2021-1709	Windows Win32k Elevation of Privilege Vulnerability	Important
Microsoft Graphics Component	CVE-2021-1696	Windows Graphics Component Information Disclosure Vulnerability	Important
Microsoft Graphics Component	CVE-2021-1665	GDI+ Remote Code Execution Vulnerability	Critical
Microsoft Graphics Component	CVE-2021-1708	Windows GDI+ Information Disclosure Vulnerability	Important
Microsoft Malware Protection Engine	CVE-2021-1647	Microsoft Defender Remote Code Execution Vulnerability	Critical
Microsoft Office	CVE-2021-1713	Microsoft Excel Remote Code Execution Vulnerability	Important
Microsoft Office	CVE-2021-1714	Microsoft Excel Remote Code Execution Vulnerability	Important
Microsoft Office	CVE-2021-1711	Microsoft Office Remote Code Execution Vulnerability	Important
Microsoft Office	CVE-2021-1715	Microsoft Word Remote Code Execution Vulnerability	Important
Microsoft Office	CVE-2021-1716	Microsoft Word Remote Code Execution Vulnerability	Important
Microsoft Office SharePoint	CVE-2021-1712	Microsoft SharePoint Elevation of Privilege Vulnerability	Important
Microsoft Office SharePoint	CVE-2021-1707	Microsoft SharePoint Server Remote Code Execution Vulnerability	Important
Microsoft Office SharePoint	CVE-2021-1718	Microsoft SharePoint Server Tampering Vulnerability	Important
Microsoft Office SharePoint	CVE-2021-1717	Microsoft SharePoint Spoofing Vulnerability	Important
Microsoft Office SharePoint	CVE-2021-1719	Microsoft SharePoint Elevation of Privilege Vulnerability	Important
Microsoft Office SharePoint	CVE-2021-1641	Microsoft SharePoint Spoofing Vulnerability	Important
Microsoft RPC	CVE-2021-1702	Windows Remote Procedure Call Runtime Elevation of Privilege Vulnerability	Important
Microsoft Windows	CVE-2021-1649	Active Template Library Elevation of Privilege Vulnerability	Important
Microsoft Windows	CVE-2021-1676	Windows NT Lan Manager Datagram Receiver Driver Information Disclosure Vulnerability	Important
Microsoft Windows	CVE-2021-1689	Windows Multipoint Management Elevation of Privilege Vulnerability	Important
Microsoft Windows	CVE-2021-1657	Windows Fax Compose Form Remote Code Execution Vulnerability	Important
Microsoft Windows	CVE-2021-1646	Windows WLAN Service Elevation of Privilege Vulnerability	Important
Microsoft Windows	CVE-2021-1650	Windows Runtime C++ Template Library Elevation of Privilege Vulnerability	Important
Microsoft Windows	CVE-2021-1706	Windows LUAFV Elevation of Privilege Vulnerability	Important
Microsoft Windows	CVE-2021-1699	Windows (modem. sys) Information Disclosure Vulnerability	Important
Microsoft Windows Codecs Library	CVE-2021-1644	HEVC Video Extensions Remote Code Execution Vulnerability	Important
Microsoft Windows Codecs Library	CVE-2021-1643	HEVC Video Extensions Remote Code Execution Vulnerability	Critical
Microsoft Windows DNS	CVE-2021-1637	Windows DNS Query Information Disclosure Vulnerability	Important
SQL Server	CVE-2021-1636	Microsoft SQL Elevation of Privilege Vulnerability	Important
Visual Studio	CVE-2020-26870	Visual Studio Remote Code Execution Vulnerability	Important
Windows AppX Deployment Extensions	CVE-2021-1642	Windows AppX Deployment Extensions Elevation of Privilege Vulnerability	Important
Windows AppX Deployment Extensions	CVE-2021-1685	Windows AppX Deployment Extensions Elevation of Privilege Vulnerability	Important
Windows CryptoAPI	CVE-2021-1679	Windows CryptoAPI Denial of Service Vulnerability	Important
Windows CSC Service	CVE-2021-1652	Windows CSC Service Elevation of Privilege Vulnerability	Important
Windows CSC Service	CVE-2021-1654	Windows CSC Service Elevation of Privilege Vulnerability	Important
Windows CSC Service	CVE-2021-1659	Windows CSC Service Elevation of Privilege Vulnerability	Important
Windows CSC Service	CVE-2021-1653	Windows CSC Service Elevation of Privilege Vulnerability	Important
Windows CSC Service	CVE-2021-1655	Windows CSC Service Elevation of Privilege Vulnerability	Important
Windows CSC Service	CVE-2021-1693	Windows CSC Service Elevation of Privilege Vulnerability	Important
Windows CSC Service	CVE-2021-1688	Windows CSC Service Elevation of Privilege Vulnerability	Important
Windows Diagnostic Hub	CVE-2021-1680	Diagnostics Hub Standard Collector Elevation of Privilege Vulnerability	Important
Windows Diagnostic Hub	CVE-2021-1651	Diagnostics Hub Standard Collector Elevation of Privilege Vulnerability	Important
Windows DP API	CVE-2021-1645	Windows Docker Information Disclosure Vulnerability	Important
Windows Event Logging Service	CVE-2021-1703	Windows Event Logging Service Elevation of Privilege Vulnerability	Important
Windows Event Tracing	CVE-2021-1662	Windows Event Tracing Elevation of Privilege Vulnerability	Important
Windows Hyper-V	CVE-2021-1691	Hyper-V Denial of Service Vulnerability	Important
Windows Hyper-V	CVE-2021-1704	Windows Hyper-V Elevation of Privilege Vulnerability	Important
Windows Hyper-V	CVE-2021-1692	Hyper-V Denial of Service Vulnerability	Important
Windows Installer	CVE-2021-1661	Windows Installer Elevation of Privilege Vulnerability	Important
Windows Installer	CVE-2021-1697	Windows InstallService Elevation of Privilege Vulnerability	Important
Windows Kernel	CVE-2021-1682	Windows Kernel Elevation of Privilege Vulnerability	Important
Windows Media	CVE-2021-1710	Microsoft Windows Media Foundation Remote Code Execution Vulnerability	Important
Windows NTLM	CVE-2021-1678	NTLM Security Feature Bypass Vulnerability	Important
Windows Print Spooler Components	CVE-2021-1695	Windows Print Spooler Elevation of Privilege Vulnerability	Important
Windows Projected File System Filter Driver	CVE-2021-1663	Windows Projected File System FS Filter Driver Information Disclosure Vulnerability	Important
Windows Projected File System Filter Driver	CVE-2021-1672	Windows Projected File System FS Filter Driver Information Disclosure Vulnerability	Important
Windows Projected File System Filter Driver	CVE-2021-1670	Windows Projected File System FS Filter Driver Information Disclosure Vulnerability	Important
Windows Remote Desktop	CVE-2021-1674	Windows Remote Desktop Protocol Core Security Feature Bypass Vulnerability	Important
Windows Remote Desktop	CVE-2021-1669	Windows Remote Desktop Security Feature Bypass Vulnerability	Important
Windows Remote Procedure Call Runtime	CVE-2021-1701	Remote Procedure Call Runtime Remote Code Execution Vulnerability	Important
Windows Remote Procedure Call Runtime	CVE-2021-1700	Remote Procedure Call Runtime Remote Code Execution Vulnerability	Important
Windows Remote Procedure Call Runtime	CVE-2021-1666	Remote Procedure Call Runtime Remote Code Execution Vulnerability	Critical
Windows Remote Procedure Call Runtime	CVE-2021-1664	Remote Procedure Call Runtime Remote Code Execution Vulnerability	Important
Windows Remote Procedure Call Runtime	CVE-2021-1671	Remote Procedure Call Runtime Remote Code Execution Vulnerability	Important
Windows Remote Procedure Call Runtime	CVE-2021-1673	Remote Procedure Call Runtime Remote Code Execution Vulnerability	Critical
Windows Remote Procedure Call Runtime	CVE-2021-1658	Remote Procedure Call Runtime Remote Code Execution Vulnerability	Critical
Windows Remote Procedure Call Runtime	CVE-2021-1667	Remote Procedure Call Runtime Remote Code Execution Vulnerability	Critical
Windows Remote Procedure Call Runtime	CVE-2021-1660	Remote Procedure Call Runtime Remote Code Execution Vulnerability	Critical
Windows splwow64	CVE-2021-1648	Microsoft splwow64 Elevation of Privilege Vulnerability	Important
Windows TPM Device Driver	CVE-2021-1656	TPM Device Driver Information Disclosure Vulnerability	Important
Windows Update Stack	CVE-2021-1694	Windows Update Stack Elevation of Privilege Vulnerability	Important
Windows WalletService	CVE-2021-1686	Windows WalletService Elevation of Privilege Vulnerability	Important
Windows WalletService	CVE-2021-1681	Windows WalletService Elevation of Privilege Vulnerability	Important
Windows WalletService	CVE-2021-1690	Windows WalletService Elevation of Privilege Vulnerability	Important
Windows WalletService	CVE-2021-1687	Windows WalletService Elevation of Privilege Vulnerability	Important

On the other hand, the vulnerability fixed by Microsoft is memory corruption flaws the was discovered in Microsoft Edge Browser as CVE-2021-1705, along with that a Windows Remote Desktop Protocol was overlapping the flaw as CVE-2021-1674.